Re: [Qemu-devel] [PATCH v2] Describe flaws in qcow/qcow2 encryption in the docs

2014-01-22 Thread Daniel P. Berrange
On Wed, Jan 22, 2014 at 08:24:00AM -0700, Eric Blake wrote: > On 01/22/2014 05:28 AM, Daniel P. Berrange wrote: > > > > > Recommend against any use of QCow/QCow2 encryption, directing > > users to dm-crypt / LUKS which can meet modern cryptography > > best practices. > > > > Signed-off-by: Danie

Re: [Qemu-devel] [PATCH v2] Describe flaws in qcow/qcow2 encryption in the docs

2014-01-22 Thread Markus Armbruster
"Daniel P. Berrange" writes: > The qemu-img.texi / qemu-doc.texi files currently describe the > qcow2/qcow2 encryption thus > > "Encryption uses the AES format which is very secure (128 bit >keys). Use a long password (16 characters) to get maximum >protection." > > While AES is indeed

Re: [Qemu-devel] [PATCH v2] Describe flaws in qcow/qcow2 encryption in the docs

2014-01-22 Thread Eric Blake
On 01/22/2014 05:28 AM, Daniel P. Berrange wrote: > > Recommend against any use of QCow/QCow2 encryption, directing > users to dm-crypt / LUKS which can meet modern cryptography > best practices. > > Signed-off-by: Daniel P. Berrange > --- > qemu-doc.texi | 23 --- > qemu-i

[Qemu-devel] [PATCH v2] Describe flaws in qcow/qcow2 encryption in the docs

2014-01-22 Thread Daniel P. Berrange
The qemu-img.texi / qemu-doc.texi files currently describe the qcow2/qcow2 encryption thus "Encryption uses the AES format which is very secure (128 bit keys). Use a long password (16 characters) to get maximum protection." While AES is indeed a strong encryption system, the way that QCow